Privacy Policy

1. Introduction

Your privacy matters to us. REVIRA ("we," "our," or "us") is committed to protecting your personal information and being transparent about how we collect, use, and share it. This Privacy Policy applies to information we collect through our website, platform, and any related services (collectively, the "Services").

This Privacy Policy is incorporated into our Terms and Conditions and governs your use of the REVIRA Platform. If you disagree with any part of this policy, please do not use the Services.

If you are a California resident, please see Section 10 for additional disclosures required under California law.

2. Information We Collect

We collect information in three main ways:

A. Information You Provide Directly

When you use the Services, you may provide:

• Account and Identity Information: Your first name, last name, screen name, email address, and/or phone number when you join a waitlist or create an account.
• Waitlist Preferences: Which REVIRA programs (community platform, REVIRA One™ device) you wish to join.
• Communications: Messages or inquiries you send to us directly via email or contact forms.

B. Information Collected Automatically

When you access the Platform, we may automatically collect:

• First-Party Usage Data: Page paths, page views, navigation and interaction events, and other information about how the Platform is used.
• Browser, IP, and Request Information: Browser user-agent information, IP address, access times, referring URL, and technical information made available when a browser requests our Services. We derive country and city information from an IP address for geographic access controls and first-party analytics and reporting.
• First-Party Identifiers: A randomly generated visitor identifier stored in browser storage and a session identifier stored for the current browser session. These identifiers are used to connect first-party analytics events.
• Marketing Consent Choice Records: We store an opt-out choice as denied with the first-party visitor and session identifiers, the time of the choice, the consent-policy version, and whether the choice came from the initial banner or reopened privacy controls. We keep later changes as separate history records rather than replacing the earlier choice. These records do not include email addresses, phone numbers, search text, article text, or health information.
• Cookies and Similar Technologies: Necessary authentication, waitlist, and session technologies; first-party browser storage used for analytics; and analytics and advertising technologies that remain active unless you opt out. See Section 8 for more.

When a visitor session is initialized, our analytics endpoint can receive the IP address, landing page, landing URL (including query parameters when present), referring URL, browser user-agent, and UTM campaign parameters. We store the IP address with the visitor session and may store the country and city derived from it. We use this information for geographic access controls, reporting, and site improvement.

C. Information from Third Parties

We may receive information from:

• Authentication Providers: We use Clerk to verify your identity. When you verify your email or phone number, we receive confirmation of your verified contact information.
• IP Geolocation Provider: Our server sends a public visitor IP address to ipapi.co to resolve the visitor's country. If that request fails, the server uses a locally bundled geolocation database as a fallback. City information is derived from that local database. We use the resulting location for geographic access controls and Revira analytics and reporting.

3. How We Use Your Information

We use the information we collect to:

• Register and manage your waitlist position and account.
• Send you verification codes, magic links, and account-related communications.
• Notify you of updates to your waitlist status, product availability, and Platform news.
• Personalize your experience on the Platform.
• Monitor and improve the safety, performance, and features of the Platform.
• Measure visits, navigation, and interactions through first-party Revira analytics so we can understand and improve the Services.
• Enforce our Terms and Conditions and protect against fraud or abuse.
• Comply with legal obligations.

Unless you opt out, we use the Meta Pixel to measure page views, visits to REVIRA CONNECT, community-join actions, and newly verified waitlist registrations. We do not use your information for automated decision-making that produces legal or similarly significant effects without human oversight.

4. Sharing of Information

We may disclose information in limited circumstances:

• Service Providers: We use providers that help us operate the Platform, including authentication, hosting, and first-party analytics infrastructure. They may process information on our behalf for those purposes.
• IP Geolocation: We disclose public visitor IP addresses to ipapi.co so it can return a country code used for geographic access controls and analytics. Revira stores the visitor session's IP address and may store the derived country and city.
• Meta Pixel: Unless you opt out, the website loads the Meta Pixel and sends PageView events, a ViewContent event with the fixed name "Revira Connect" on /revira_connect, JoinCommunity events with the source page path, and a Lead event after a new waitlist account is successfully verified. Meta may also receive technical information ordinarily associated with a Pixel request, such as the page URL, browser or device information, IP address, and Meta cookies or identifiers. REVIRA does not intentionally add search queries, article text, health conditions, treatments, medications, email addresses, or phone numbers to Meta event parameters. Meta's processing is also governed by Meta's own privacy and cookie policies.
• Legal Compliance: We may disclose information when required by law, regulation, or valid legal process (e.g., a court order or subpoena).
• Protection of Rights: We may share information to protect the rights, property, or safety of REVIRA, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods vary by the type of information and the purpose for which it is used. We review our retention practices periodically and update this policy when material changes occur.

We retain first-party marketing-consent choice records for as long as reasonably needed to document and analyze the consent funnel, honor privacy choices, meet legal obligations, and resolve disputes. You may ask us to access or delete consent records associated with you, subject to legal exceptions and our ability to verify and locate the applicable first-party identifiers.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS), access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on where you live, you may have certain rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to certain exceptions.
• Marketing Communications: You may opt out of marketing communications at any time by following the unsubscribe instructions in any email we send, or by contacting us directly.

To exercise any of these rights, contact us at privacy@revirahealth.com.

Marketing tracking choices: Analytics and advertising tracking are active by default for new visitors. Selecting "Opt out" stores a denied choice and stops future Meta events from the website. You can review or opt out later through the privacy controls in the site footer. Revira stores opt-out choices and later changes as first-party records for consent-funnel reporting. You may contact us to exercise applicable access, deletion, correction, or objection rights for these records.

8. Cookies and Tracking Technologies

We use cookies and browser storage technologies to operate the Platform and understand first-party usage. Types of technologies used by the current site include:

• Necessary Cookies and Session Technologies: Used for authentication, maintaining sessions, and remembering waitlist status or other necessary site state.
• First-Party Browser Storage and Consent Records: A randomly generated visitor identifier and your current marketing choice are kept in local browser storage, and a session record is kept in session storage. Revira also keeps first-party server records of explicit choices and changes associated with those visitor and session identifiers. These records support consent-funnel reporting and are not Meta Pixel identifiers or permission for the Meta Pixel to run.
• Revira Analytics and Geolocation: Revira receives page, navigation, interaction, landing URL, UTM, referrer, browser user-agent, IP address, visitor identifier, and session identifier data through its analytics endpoints. Public IP addresses are sent to ipapi.co to resolve country; Revira may store that country and a city derived from a local geolocation database. This is used for geographic access controls and analytics and is separate from optional advertising tracking.
• Advertising Tracking: The Meta Pixel is loaded by default for new visitors unless they opt out. An opt-out choice is stored in your browser so the website can continue to honor it. When enabled, Meta may set or read its own cookies or identifiers and receive the event and technical information described in Section 4.

You can change your marketing choice through the privacy controls in the site footer. You can also control cookies and browser storage through your browser settings. Disabling or clearing necessary technologies may affect Platform functionality.

9. Children's Privacy

The REVIRA Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18 without parental consent, we will take steps to delete that information promptly.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources, the business purpose, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Marketing and Advertising Choices: Meta Pixel tracking is active by default for new visitors, and you can opt out through the site footer. Depending on where you live, you may have additional rights regarding advertising or cross-context behavioral advertising. Contact us using the information below to exercise your rights or ask questions about our practices.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at privacy@revirahealth.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify registered users via email or in-Platform notice. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your personal information, please contact us: